CVE-2024-24832 is a missing authorization vulnerability (CWE-862) affecting Metagauss EventPrime through version 3.3.9. The vulnerability allows an attacker to perform unauthorized actions due to lack of proper access control enforcement. The CVSS 3.1 base score is 8.2 (high), with attack vector network, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and low availability impact. There is no vendor advisory or patch currently available, and the product is not a cloud service.

Exploitation of this vulnerability could allow an unauthenticated attacker to perform unauthorized actions that compromise the integrity of the affected system. There is no confidentiality impact, and availability impact is low. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the affected EventPrime instances and monitor for suspicious activity related to unauthorized actions. Avoid exposing the affected versions to untrusted networks.